Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-12342

SailPoint IdentityIQ Improper Form Validation Vulnerability

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.

Affected versions

  • SailPoint Technologies IdentityIQ

    From 8.5 · through 8.5p2; From 8.4 · through 8.4p4; From 8.3 · through 8.3p5

References 1

sailpoint.com